Privacy policy

Information we collect

• Information you give us: your name, employer, role and any details you include when you submit an enquiry through the website.
• Information collected automatically: pages visited, approximate location, device and browser type, and how you arrived at the site.
• Information from third parties: publicly available business information, and details shared with us by a scheme you already use.

Why we use it

• To answer enquiries and provide the information you have asked for.
• To operate, secure and improve the website.
• To understand how the site is used, where you have agreed to analytics cookies.
• To meet our legal, regulatory and record-keeping obligations.

Our legal bases

We rely on your consent for optional cookies and for marketing messages. We rely on our legitimate interests to respond to business enquiries, to keep the site secure and to understand how it is used. We rely on legal obligation where a law or regulator requires us to keep records.

Sharing your information

We share personal information only where it is necessary: with the companies in our group that operate the scheme you are asking about, with service providers who host our website, deliver messages or route enquiries to our team, and with professional advisers, regulators or authorities where we are required to do so.

We do not sell personal information. Where a provider processes information outside the UK, we put appropriate safeguards in place.

How long we keep it

Enquiries are kept for as long as needed to deal with them and then for a reasonable period afterwards as a business record. Website analytics are held in aggregate. Where a law sets a minimum retention period, we follow it.

Your rights

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete information, or to restrict or object to how we use it.
• Withdraw consent at any time, including for cookies and marketing.
• Complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we have handled your information.

Security

We use appropriate technical and organisational measures to protect personal information, including access controls, encryption in transit and supplier due diligence. No online service can be completely secure, so we also limit what we collect and how long we keep it.

Changes to this policy

We review this policy periodically and will update the date at the top whenever it changes.